Lucene search

K
archlinuxArch LinuxASA-201503-19
HistoryMar 20, 2015 - 12:00 a.m.

xerces-c: denial of service

2015-03-2000:00:00
Arch Linux
lists.archlinux.org
17

EPSS

0.041

Percentile

92.3%

  • CVE-2015-0252 (denial of service)

The Xerces-C XML parser mishandles certain kinds of malformed input
documents, resulting in a segmentation fault during a parse operation.
The bug does not appear to allow for remote code execution, but is a
denial of service attack that in many applications may allow for an
unauthenticated attacker to supply malformed input and cause a crash.

OSVersionArchitecturePackageVersionFilename
anyanyanyxerces-c< 3.1.2-1UNKNOWN